R RCSC
0161 388 2444 Book a call

Privacy notice

Last updated 13/09/2026

This notice explains what personal data we hold, where it came from, why we have it and what you can tell us to do about it. It is written to be read rather than to cover us, so if anything here is unclear, email us and we will answer plainly.

Who we are

RCSC (NW) Ltd is the data controller. We are registered in England and Wales, company number 13125775, at 151 The Rock, Bury, Greater Manchester, BL9 0ND.

For anything about your data, including a request or a complaint, email hello@rcsc.uk or ring 0161 388 2444.

If we contacted you and you never gave us your details

We approach businesses we have not worked with before. If that is how you arrived here, this is the section that matters, and the email we sent you names the specific source we used.

We collect business contact details from sources that are public:

  • the Environment Agency public register of waste carriers, brokers and dealers, and its equivalents at SEPA in Scotland and Natural Resources Wales
  • the Companies House register
  • the business's own published website

What we hold is deliberately thin: the business name, the published office email address or phone number, the towns it covers, its website, its company number, the source we took it from and the date we took it. We do not buy lists, we do not scrape personal inboxes, and we do not guess at individual email addresses.

A named person's work email address is still personal data, which is why this notice exists even though we are contacting you about your business.

Our lawful basis

Business outreach
Legitimate interests. Our interest is in finding businesses that could use the kind of system we build. We have assessed that against your interests, kept the data minimal, only approach incorporated businesses, and stop the moment you tell us to. You can object at any time and we will not ask you to justify it.
Answering an enquiry you sent us
Legitimate interests, or the steps before entering a contract.
Work we do for you as a customer
Performance of our contract with you, and our legal obligations for records and tax.
Keeping you off our contact list once you have said no
Legitimate interests and our obligation to honour your objection. We cannot reliably avoid contacting you again without keeping a note that you asked us not to.

How to make us stop

Reply to any email from us with "no thanks", or email hello@rcsc.uk. We add you to a suppression list the day it arrives and it is permanent. It is checked before anything is ever sent, and no further approach is possible once you are on it.

How long we keep it

  • Outreach contacts who never engage: deleted within twelve months of us first making contact, and sooner if the campaign they were part of finishes before then.
  • People who asked not to be contacted: email address only, kept on the suppression list indefinitely, because that is the only way to keep the promise.
  • Enquiries that go nowhere: twelve months.
  • Customers: for the life of the contract, then six years for tax and records.

Who else sees it

Our hosting, email and AI providers process data on our instructions under contract, and nobody else. We do not sell data, share it with other marketers, or pass it on for anyone else's purposes. Where a provider operates outside the UK we rely on the approved transfer safeguards, and the systems we host for customers run in the UK.

When we host a system for a customer, their data in that system belongs to them. They are the controller and we act as their processor under a written agreement.

How we keep it safe

We are Cyber Essentials certified, which is the UK government-backed scheme, assessed by an independent assessor and listed on the IASME register rather than awarded by us to ourselves. Systems we host run on UK infrastructure and are backed up nightly to somewhere that is not the machine running them, and those backups are retained for thirty days.

We will send you our processor terms, our backup policy and our sub-processor list on request. You should not have to take any of it on trust.

The enquiry form

What you type into the form on this site, and any file you attach, goes to one place: an email to the person who will reply to you, sent through our email provider, with a copy kept on our own UK infrastructure in case that email ever fails to arrive. It is used to look at your enquiry and for nothing else. An attached spreadsheet is not shared, not shown to anybody outside the firm, and deleted the day you ask, or when the enquiry closes without a job. The form records the page it was sent from and, if you arrived from an advert, the click reference in the address bar, so we can tell whether advertising is worth paying for. Nothing is written to your device to do that.

The website chat

The chat on this site is an automated assistant. What you type into it is sent to our AI provider to write each reply. They act on our instructions under business terms that do not allow it to be used to train their models, and as they may process it outside the UK, the approved transfer safeguards apply. If you give us your details in the chat, they and the conversation are emailed to the person who will get back to you, with a copy kept on our own UK infrastructure, and used for your enquiry and nothing else. The conversation is kept in your browser only until you close the tab.

Booking a call

When you book the 20-minute call, on the assessment page, after sending the contact form, or in the chat, the time goes into our calendar with you as the invited guest, so you receive a calendar invitation from us by email, and a confirmation text to the mobile number you gave. A reminder text goes an hour before. That is the only time this site contacts you, and only because you have just asked us to ring you then. Your name, business, number, email and the time are kept with your enquiry as above.

Cookies and tracking

When you first visit, a small notice asks whether you accept cookies. Both answers are one click and the notice is not shown again for twelve months, whichever you choose. You can change your mind at any time with "Cookie settings" at the foot of every page.

If you reject, the only cookie set is the one that remembers your answer. If you accept, we also set a cookie with a random visitor reference so we can tell a return visit from a first one, and we load two measurement tags: Google's, and the Meta Pixel. Each sets its own cookies and is covered by that company's privacy notice. We use Google's to see which advertising brought people to the site.

The Meta Pixel does that too, and one more thing: it lets us show adverts for RCSC on Facebook and Instagram to people who have already visited this site. Meta receives the address of the pages you open here, the time, and your browser's details, and matches them to a Facebook or Instagram account if you have one. We never see who is on the list, only how many people are in it. The list is kept for no more than 180 days and is used for nothing else. For that collection Meta and RCSC are joint controllers; Meta's notice at facebook.com/privacy/policy explains Meta's side. If you would rather not be included, reject cookies here, or change your answer with "Cookie settings" at the foot of any page. You can also turn off adverts based on activity on other websites in your Facebook or Instagram settings. Our emails contain no tracking pixels, so we cannot tell whether you opened one.

We do count page views, on our own server rather than through a third party: which pages were opened, on which day, for how long, which site or campaign link brought you here, how far through a form or the chat you got, the kind of device and browser, and an approximate location (country and town) worked out from your network address at the time. Without cookies, your browser keeps a random marker so we can tell a return visit from a first one; it identifies the browser to itself, not you to us. Your IP address is hashed before anything is kept, so it cannot be turned back into an address, and the approximate location is never stored with it. If your browser sends a "do not track" or Global Privacy Control signal, the page is not counted at all.

One thing we can tell, and we would rather say so than hide it: the link in an email from us carries a short reference, so if you visit the page it points to, we know which firm looked and when. That is all it records. It sets no cookie, stores nothing on your device, and tells us nothing about what else you do online. If you would rather we did not know, remove the part of the address after the question mark before you open it.

Automated decisions

We do not make automated decisions about you and we do not profile you.

Your rights

You can ask us for a copy of what we hold, to correct it, to delete it, to restrict what we do with it, or to object to it. Where it applies, you can ask us to hand it over in a portable form. Ask by emailing hello@rcsc.uk. There is no charge and we will respond within a month, usually much sooner.

If we get it wrong you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you told us first so we can put it right.